At some point (probably during the upgrade) it seems like the list of allowed file extensions for attachments was changed. The current list of allowed file extensions is... interesting, but It's easy enough to rename files to one of the allowed extensions before uploading.
It turns out, though, you also can't download attachments with forbidden extensions. Here's a random example I stumbled across.
I don't know if changing the list of allowed file extensions would be worth the effort, but I figured I'd point it out anyway.
Allowed attachment file extensions
-
- Member
- Posts: 5536
- Joined: Mon Mar 25, 2013 7:01 pm
Re: Allowed attachment file extensions
It let me download that without warning or error. No idea why.Octocontrabass wrote: ↑Tue Aug 20, 2024 5:48 pm It turns out, though, you also can't download attachments with forbidden extensions. Here's a random example I stumbled across.
Kaph — a modular OS intended to be easy and fun to administer and code for.
"May wisdom, fun, and the greater good shine forth in all your work." — Leo Brodie
"May wisdom, fun, and the greater good shine forth in all your work." — Leo Brodie
-
- Member
- Posts: 5536
- Joined: Mon Mar 25, 2013 7:01 pm
Re: Allowed attachment file extensions
I can confirm that the ld and asm files are now hidden. Honestly, not sure what an extension filter is supposed to do if you can still upload all files by just renaming them.
Carpe diem!
Re: Allowed attachment file extensions
Derp! Sorry, no; ld and asm are blocked without even a link.
It's certainly close to just being security theater, but not entirely there. I think it's good for boards with non-technical users, particularly new non-technical users. Do we gain anything from it at all?
Kaph — a modular OS intended to be easy and fun to administer and code for.
"May wisdom, fun, and the greater good shine forth in all your work." — Leo Brodie
"May wisdom, fun, and the greater good shine forth in all your work." — Leo Brodie
- chase
- Site Admin
- Posts: 710
- Joined: Wed Oct 20, 2004 10:46 pm
- Libera.chat IRC: chase_osdev
- Location: Texas
- Discord: chase/matt.heimer
- Contact:
Re: Allowed attachment file extensions
I've added ld and asm to the allowed list.